Well, technically you can use any certificate but if you want it to work with GateKeeper than you will need to have an Apple certificate (which means the Apple Developer program). When I was looking around $99/year for a code signing certificate wasn't too outrageous.

You also might want to look at App Wrapper from Ohanaware. It has some different options.